ip tcp intercept

[Montero84]

Hello,

I would like to use the ip tcp intercept feature in my router. According with cisco that feature is avaliable since version 11.x.. I have version 12.4 in my router but I can't use that command.. i type ip tcp ? and the intercept option is not there... any idea why?

Thanks in advance!

 

[burtsbees]

You need an advanced IOS, like advanced enterprise, advanced security, etc.
Also, you cannot use the IOS Firewall with tcp intercept. Post a sh ver, or go to Cisco Software Advisor and enter your image name to get a list of features it does support.

Burt

 

[Montero84]

Hello

I have IOS Advanced Security but don't have that command.

Thanks

 

[burtsbees]

Your IOS simply does not support it. Like I said, go to the Cisco Feature Navigatior, choose "search by image", and plug in the IOS file name and it will give you a list of features that particular IOS build supports. If TCP Intercept is not one of them, then there you go. If it is, then perhaps you are trying it from the wrong level. You need to be at global config...

router(config)#ip tcp intercept list ...

Burt